Description (CNA)
MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / mqtt-packet node module | affected <3.4.6 || > 4.0.0 <4.0.5 |
CWE
CWE-400
References
- https://github.com/mcollina/mosca/issues/393
- https://nodesecurity.io/advisories/75
- https://github.com/mqttjs/mqtt-packet/pull/8
ADP enrichment
No English description supplied.